CVE-2013-1775
Published: 27 February 2013
sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.
Priority
Status
Package | Release | Status |
---|---|---|
sudo Launchpad, Ubuntu, Debian |
Upstream |
Released
(1.7.10p7, 1.8.6p7)
|
Patches: Upstream: http://www.sudo.ws/repos/sudo/rev/ddf399e3e306 (1.7) Upstream: http://www.sudo.ws/repos/sudo/rev/ebd6cc75020f (1.8) |